Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/cffb2afc-1c5c-3086-b3a6-8048790da8db.roa
File: cffb2afc-1c5c-3086-b3a6-8048790da8db.roa (raw, json)
Hash identifier: EBpJhhvDMrBHSg44uwb8qwf8kNVG7xyPV9EdqWn3Tak=
Subject key identifier: 8F:49:AC:58:CA:EF:41:33:39:7B:03:7F:7A:E6:9A:D7:95:3F:D6:70
Certificate issuer: /CN=174db496-399b-48c7-919e-3e6dfd4a5584
Certificate serial: 010D0C9F43285848D7A652194CBD59CDE3B1C000
Authority key identifier: 9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/cffb2afc-1c5c-3086-b3a6-8048790da8db.roa
Signing time: Tue 11 Feb 2025 02:00:39 +0000
ROA not before: Tue 11 Feb 2025 02:00:39 +0000
ROA not after: Mon 12 May 2025 01:00:39 +0000
asID: 40934
IP address blocks: 173.243.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d7:a6:52:19:4c:bd:59:cd:e3:b1:c0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=174db496-399b-48c7-919e-3e6dfd4a5584
Validity
Not Before: Feb 11 02:00:39 2025 GMT
Not After : May 12 01:00:39 2025 GMT
Subject: CN=4310bd7d-a5b4-4453-a689-1ad9928e00c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b8:53:45:65:6c:ce:ea:26:f1:ca:f9:45:e9:
f3:02:ff:eb:18:7a:8d:b1:59:3c:51:01:ca:df:60:
3c:ee:75:5d:e5:4f:e2:f0:42:94:1f:ad:72:28:3d:
c2:11:0b:d5:da:9b:f5:f8:7e:36:98:2a:5c:7f:1d:
c7:cb:ad:fb:7f:9d:bf:78:97:bb:e2:05:49:a4:0b:
1d:7e:81:e2:91:3f:8a:16:19:5f:23:e3:70:ce:2e:
48:c6:7f:4e:42:b1:21:ee:fe:14:29:90:28:85:8c:
64:fb:8b:ef:4f:18:e7:de:90:7d:f6:ca:98:a3:79:
7e:92:3f:c3:1b:de:36:be:61:55:84:b8:2c:cd:3a:
53:b6:a9:86:87:2d:58:70:b0:32:74:cc:36:6d:bb:
8a:32:2d:1b:19:80:82:4b:3d:ef:db:25:64:60:43:
44:17:e4:a5:60:39:67:34:fa:a0:ab:07:13:f4:f9:
5e:ec:69:4b:6e:91:c7:08:fd:7b:d8:ee:61:3f:cf:
c6:78:e6:c6:9e:b3:e3:54:1b:f0:82:b4:44:0d:a1:
8a:9c:a6:be:a2:92:c8:30:92:da:95:cc:54:72:fd:
2a:00:0f:6f:bc:ae:70:e9:22:51:dd:90:20:87:ee:
87:dc:30:de:99:29:1a:e0:82:dc:be:f7:f7:fb:59:
02:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:49:AC:58:CA:EF:41:33:39:7B:03:7F:7A:E6:9A:D7:95:3F:D6:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/cffb2afc-1c5c-3086-b3a6-8048790da8db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl
X509v3 Authority Key Identifier:
keyid:9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
sbgp-ipAddrBlock: critical
IPv4:
173.243.129.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:70:44:e9:3f:0b:75:7d:c4:0c:9e:eb:81:1f:3a:ee:32:ae:
a1:33:94:6e:db:ed:fb:c9:5e:7c:ef:78:95:7d:6f:49:af:7f:
c0:89:9f:67:ca:2d:27:d4:d3:bf:b3:de:dd:fe:81:0b:47:8a:
f8:dc:89:5a:07:62:b7:1d:3d:4d:66:fd:00:d2:0c:03:3c:e3:
4f:f6:29:c2:92:b3:b2:80:4e:65:c3:bd:91:fc:42:44:c6:ad:
22:94:1b:a1:df:4b:18:67:49:7e:e4:70:2a:2a:ab:04:54:32:
fb:ec:b7:4a:a3:86:cf:7f:b5:54:f8:48:6b:bd:7a:b4:5c:92:
15:a4:92:2f:f7:d2:15:a9:94:96:78:6a:6b:13:7e:b0:a4:9d:
5b:c7:80:5d:91:17:74:d9:5f:aa:02:24:6d:a1:a2:8c:0c:a5:
13:57:dd:96:c0:24:e0:a4:ff:43:af:ae:f4:da:27:78:72:87:
18:1b:16:74:be:7c:ed:3a:bc:7d:5f:25:c4:a1:1a:c2:a0:eb:
c0:ac:60:18:e6:73:3a:1b:c9:a3:9f:24:d6:01:b2:6c:d8:e4:
5e:14:88:69:b6:9f:58:48:e2:88:76:94:1e:02:31:59:8d:ba:
ee:7a:3e:23:75:d4:f6:a0:70:e6:5f:40:19:59:1a:5e:98:62:
98:0e:70:f1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjXplIZTL1ZzeOxwAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTc0ZGI0OTYtMzk5Yi00OGM3LTkxOWUtM2U2ZGZkNGE1
NTg0MB4XDTI1MDIxMTAyMDAzOVoXDTI1MDUxMjAxMDAzOVowLzEtMCsGA1UEAxMk
NDMxMGJkN2QtYTViNC00NDUzLWE2ODktMWFkOTkyOGUwMGMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibhTRWVszuom8cr5RenzAv/rGHqNsVk8UQHK
32A87nVd5U/i8EKUH61yKD3CEQvV2pv1+H42mCpcfx3Hy637f52/eJe74gVJpAsd
foHikT+KFhlfI+Nwzi5Ixn9OQrEh7v4UKZAohYxk+4vvTxjn3pB99sqYo3l+kj/D
G942vmFVhLgszTpTtqmGhy1YcLAydMw2bbuKMi0bGYCCSz3v2yVkYENEF+SlYDln
NPqgqwcT9Ple7GlLbpHHCP172O5hP8/GeObGnrPjVBvwgrREDaGKnKa+opLIMJLa
lcxUcv0qAA9vvK5w6SJR3ZAgh+6H3DDemSka4ILcvvf3+1kC6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI9JrFjK70EzOXsDf3rmmteVP9ZwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNzRk
YjQ5Ni0zOTliLTQ4YzctOTE5ZS0zZTZkZmQ0YTU1ODQvY2ZmYjJhZmMtMWM1Yy0z
MDg2LWIzYTYtODA0ODc5MGRhOGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMTc0ZGI0OTYtMzk5Yi00OGM3LTkx
OWUtM2U2ZGZkNGE1NTg0LzE3NGRiNDk2LTM5OWItNDhjNy05MTllLTNlNmRmZDRh
NTU4NC5jcmwwHwYDVR0jBBgwFoAUnbYvqwyEv+F7kStHMMc1sXqvgNEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8xNzRkYjQ5Ni0zOTliLTQ4YzctOTE5ZS0zZTZk
ZmQ0YTU1ODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfOBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABZwROk/C3V9xAye64EfOu4yrqEzlG7b7fvJXnzveJV9b0mvf8CJn2fK
LSfU07+z3t3+gQtHivjciVoHYrcdPU1m/QDSDAM840/2KcKSs7KATmXDvZH8QkTG
rSKUG6HfSxhnSX7kcCoqqwRUMvvst0qjhs9/tVT4SGu9erRckhWkki/30hWplJZ4
amsTfrCknVvHgF2RF3TZX6oCJG2hoowMpRNX3ZbAJOCk/0OvrvTaJ3hyhxgbFnS+
fO06vH1fJcShGsKg68CsYBjmczobyaOfJNYBsmzY5F4UiGm2n1hI4oh2lB4CMVmN
uu56PiN11PagcOZfQBlZGl6YYpgOcPE=
-----END CERTIFICATE-----
Generated at Sat Apr 5 05:22:18 2025 by rpki-client